Two factor would be much more palatable if they offered more methods than just email. How hard is it to implement TOTP, really?